Release Notes for [**release-2024-03-20\_23-01-base**](https://github.com/dfinity/ic/tree/release-2024-03-20_23-01-base) (463296c0bc82ad5999b70245e5f125c14ba7d090)
===================================================================================================================================================================

Changelog since git revision [778d2bb870f858952ca9fbe69324f9864e3cf5e7](https://dashboard.internetcomputer.org/release/778d2bb870f858952ca9fbe69324f9864e3cf5e7)

Features:
---------

* [`282d154e4`](https://github.com/dfinity/ic/commit/282d154e4) Consensus: Put the next start height into the batch
* [`a2038d04a`](https://github.com/dfinity/ic/commit/a2038d04a) Consensus,Execution: QueryStats aggregation that is robust against malicious nodes
* [`aba698463`](https://github.com/dfinity/ic/commit/aba698463) Crypto: add threshold Schnorr traits and structs
* [`73278306d`](https://github.com/dfinity/ic/commit/73278306d) Crypto: Support ring's buggy PKCS8 format for Ed25519 keys
* [`8e5186803`](https://github.com/dfinity/ic/commit/8e5186803) Execution,Runtime: Increase the instruction limit for update calls to 40B
* [`1d9661c50`](https://github.com/dfinity/ic/commit/1d9661c50) Execution,Runtime: Implement take canister snapshot
* [`a1a201bd0`](https://github.com/dfinity/ic/commit/a1a201bd0) Execution,Runtime: EXC:1532: Introduce delete canister snapshot arguments
* [`c6ad509b8`](https://github.com/dfinity/ic/commit/c6ad509b8) Execution,Runtime: Query Cache: Cache all but the transient errors
* [`4e9578cb0`](https://github.com/dfinity/ic/commit/4e9578cb0) Message Routing,Execution,Interface: Add deadline fields to messages, callbacks and call contexts
* [`f4e5d56f9`](https://github.com/dfinity/ic/commit/f4e5d56f9) Message Routing: New certification version with Request and Response deadlines
* [`57bd87670`](https://github.com/dfinity/ic/commit/57bd87670) Message Routing,Runtime: merge sharded overlays
* [`147403cca`](https://github.com/dfinity/ic/commit/147403cca) Networking(http-endpoint): Add HTTP/2 support to alpn protocol header
* [`ba9640a49`](https://github.com/dfinity/ic/commit/ba9640a49) Networking,Consensus(consensus/p2p): push artifacts based on importance v2
* [`a072df420`](https://github.com/dfinity/ic/commit/a072df420) Node: - Bazel base image target
* [`5482ca3bc`](https://github.com/dfinity/ic/commit/5482ca3bc) Node: Rename log\_and\_halt\_installation\_on\_error
* [`626d1fd79`](https://github.com/dfinity/ic/commit/626d1fd79) Node: Remove python vsock code
* [`5d94ab31d`](https://github.com/dfinity/ic/commit/5d94ab31d) Node,Crypto(crypto): Add fstrim\_tool to run fstrim and collect metrics
* [`710b828e1`](https://github.com/dfinity/ic/commit/710b828e1) Runtime: implement charging instructions for canister logging when calling debug\_print
* [`9ec68e222`](https://github.com/dfinity/ic/commit/9ec68e222) Runtime,Execution: add trap message to canister logging

Bugfixes:
---------

* [`6edce9829`](https://github.com/dfinity/ic/commit/6edce9829) Boundary Nodes,Node(boundary-nodes): enable slicing on raw
* [`ea37f353e`](https://github.com/dfinity/ic/commit/ea37f353e) Boundary Nodes,Node(nginx): intercept errors and display custom error page
* [`79de489c4`](https://github.com/dfinity/ic/commit/79de489c4) Boundary Nodes,Node(static-testnet): allow deployments without denylist
* [`8e4dc77fb`](https://github.com/dfinity/ic/commit/8e4dc77fb) Execution,Runtime: Re-classify hypervisor ic0.call\_cycles\_add trap as ContractViolation
* [`31b77b74f`](https://github.com/dfinity/ic/commit/31b77b74f) Networking: don't unwrap if downcasting failed
* [`14c177e00`](https://github.com/dfinity/ic/commit/14c177e00) Networking: improve consistency of subnet read state path conditions
* [`dde8cc32b`](https://github.com/dfinity/ic/commit/dde8cc32b) Networking: subnet read state path conditions
* [`b9fdc7d9c`](https://github.com/dfinity/ic/commit/b9fdc7d9c) Networking(consensus\_manager): disable request size limit
* [`cae6cdb8b`](https://github.com/dfinity/ic/commit/cae6cdb8b) Node: ipv4 connectivity endpoints

Performance improvements:
-------------------------

* [`02d1dbb83`](https://github.com/dfinity/ic/commit/02d1dbb83) Message Routing,Runtime: Merge more often with LSMT

Chores:
-------

* [`541a311fd`](https://github.com/dfinity/ic/commit/541a311fd) Consensus: Improve HostOS console logging during registration
* [`909a2c495`](https://github.com/dfinity/ic/commit/909a2c495) Message Routing: Bring next checkpoint round to the execution level
* [`d41ccefd9`](https://github.com/dfinity/ic/commit/d41ccefd9) Consensus: Use warn! instead of trace! in batch delivery when there is no finalized block at the expected\_batch\_height
* [`cf03c9d5b`](https://github.com/dfinity/ic/commit/cf03c9d5b) Crypto: Upgrade curve25519-dalek crate to 4.1.1
* [`808d4c01b`](https://github.com/dfinity/ic/commit/808d4c01b) Crypto: use the workspace version for x509-parser
* [`635db6088`](https://github.com/dfinity/ic/commit/635db6088) Crypto: Address Ed25519 crate review comments
* [`cf9fb5650`](https://github.com/dfinity/ic/commit/cf9fb5650) Crypto,Interface(crypto): Add AlgorithmId for ThresholdEd25519
* [`f2f03f803`](https://github.com/dfinity/ic/commit/f2f03f803) Execution,Runtime: Add wasm\_memory\_limit to canister state and settings
* [`334bc6082`](https://github.com/dfinity/ic/commit/334bc6082) Execution,Runtime: Always return error for fetching canister logs as ingress despite the feature flag
* [`80dc31b92`](https://github.com/dfinity/ic/commit/80dc31b92) Execution,Runtime: Remove unused InstallCodeContextError::InvalidCanisterId
* [`1a8dd39aa`](https://github.com/dfinity/ic/commit/1a8dd39aa) Message Routing: refactor chunkable trait and simplify completed()
* [`22d95d7e9`](https://github.com/dfinity/ic/commit/22d95d7e9) Message Routing: Refactor deliver\_state\_sync of the state sync client interface
* [`4fb8056a7`](https://github.com/dfinity/ic/commit/4fb8056a7) Networking(http\_endpoint): migrate query endpoint to axum
* [`cbf002f3f`](https://github.com/dfinity/ic/commit/cbf002f3f) Networking(http\_endpoint): migrate call endpoint to axum
* [`b083a168f`](https://github.com/dfinity/ic/commit/b083a168f) Networking: small cleanup
* [`b340e2f3f`](https://github.com/dfinity/ic/commit/b340e2f3f) Node: completely remove the sev dependancy from the replica build
* [`3a604a703`](https://github.com/dfinity/ic/commit/3a604a703) Node: Clean up IC-OS configuration documentation
* [`89ed76b01`](https://github.com/dfinity/ic/commit/89ed76b01) Node: Remove old GuestOS documentation
* [`966b05f45`](https://github.com/dfinity/ic/commit/966b05f45) Runtime: Upgrade Wasmtime to v18
* [`838075e5b`](https://github.com/dfinity/ic/commit/838075e5b) Runtime(RUN): Remove error on bad validation config
* [`e3755333d`](https://github.com/dfinity/ic/commit/e3755333d) Runtime(RUN): Remove unused deserialize error

Refactoring:
------------

* [`f7ceaded1`](https://github.com/dfinity/ic/commit/f7ceaded1) Boundary Nodes,Message Routing(crypto): Use ic-crypto-ed25519 instead of internal crypto basic\_sig crate
* [`879f18258`](https://github.com/dfinity/ic/commit/879f18258) Crypto: Simplify dependencies of ic-crypto-utils-threshold-sig-der
* [`ba2ca6902`](https://github.com/dfinity/ic/commit/ba2ca6902) Crypto: Use ic-crypto-ed25519 for all Ed25519 key serialization and deserialization
* [`725a52e61`](https://github.com/dfinity/ic/commit/725a52e61) Crypto: Remove EccFieldElement abstraction
* [`b969becdd`](https://github.com/dfinity/ic/commit/b969becdd) Crypto: rename PreSignatureQuadruple to EcdsaPreSignatureQuadruple
* [`98c225e28`](https://github.com/dfinity/ic/commit/98c225e28) Message Routing: Move PageMapLayout to state\_layout
* [`b19657cf5`](https://github.com/dfinity/ic/commit/b19657cf5) Networking: remove the SEV dep from the replica

Tests:
------

* [`586cd38f6`](https://github.com/dfinity/ic/commit/586cd38f6) Consensus(exhaustive): Add unit tests writing exhaustive CUP set to disk
* [`838549128`](https://github.com/dfinity/ic/commit/838549128) Consensus(exhaustive): Extend ExhaustiveSet unit test
* [`a831c94f2`](https://github.com/dfinity/ic/commit/a831c94f2) Consensus: Split off an ic-test-utilities-consensus crate from ic-test-utilities
* [`44b1cd8db`](https://github.com/dfinity/ic/commit/44b1cd8db) Message Routing: Add a test for stability of shard size.
* [`9193b06db`](https://github.com/dfinity/ic/commit/9193b06db) Message Routing,Interface: Split off an ic-test-utilities-io crate from ic-test-utilities
* [`a29c1907f`](https://github.com/dfinity/ic/commit/a29c1907f) Message Routing,Interface: Move ic\_test\_utilities::notification into the only test using it
* [`8b4abff88`](https://github.com/dfinity/ic/commit/8b4abff88) Runtime: Split off an ic-test-utilities-embedders crate from ic-test-utilities

Documentation:
--------------

* [`6e045f4e8`](https://github.com/dfinity/ic/commit/6e045f4e8) Crypto: fix comment in tECDSA

Other changes:
--------------

* [`2f6164518`](https://github.com/dfinity/ic/commit/2f6164518) Boundary Nodes,Node: leave slicing only on raw domain
* [`f61c56422`](https://github.com/dfinity/ic/commit/f61c56422) Consensus,Boundary Nodes,Node: don't suffix the newer clap version
* [`5cd5d6568`](https://github.com/dfinity/ic/commit/5cd5d6568) Consensus,Crypto,Interface: yet another attempt to fix the time source complexity we currently have
* [`4372669f5`](https://github.com/dfinity/ic/commit/4372669f5) Consensus,Execution,Message Routing: Split off an ic-test-utilities-types crate from ic-test-utilities
* [`193ae4efc`](https://github.com/dfinity/ic/commit/193ae4efc) Consensus,T&V,IDX(consensus): Always purge artifacts which are at least 50 heights below the last CUP height.
* [`98c0060a2`](https://github.com/dfinity/ic/commit/98c0060a2) Consensus,Networking,Boundary Nodes,Node,Financial Integrations: don't suffix the newer clap version (cargo edition)
* [`460a49acd`](https://github.com/dfinity/ic/commit/460a49acd) Crypto: fix rustdoc warning for EcdsaPreSignatureQuadruple
* [`df2b015a4`](https://github.com/dfinity/ic/commit/df2b015a4) Execution,Consensus,Message Routing,Interface: Split off an ic-test-utilities-state crate from ic-test-utilities
* [`e6913a356`](https://github.com/dfinity/ic/commit/e6913a356) T&V,Execution,Runtime,Interface: Change some error codes to keep the convention
* [`f49910865`](https://github.com/dfinity/ic/commit/f49910865) Node: Updating container base images refs [2024-03-19-0726]
* [`6e839a1de`](https://github.com/dfinity/ic/commit/6e839a1de) Node: Finish adding manual tags to ic-os
* [`32037614a`](https://github.com/dfinity/ic/commit/32037614a) Node: Updating container base images refs [2024-03-14-0814]
* [`310086145`](https://github.com/dfinity/ic/commit/310086145) Node: Updating container base images refs [2024-03-07-2303]
* [`816c2a0df`](https://github.com/dfinity/ic/commit/816c2a0df) Node: Continue to use SEV kernel on SetupOS
* [`fc0ba734c`](https://github.com/dfinity/ic/commit/fc0ba734c) Node: Updating container base images refs [2024-03-07-0812]
* [`8776594c5`](https://github.com/dfinity/ic/commit/8776594c5) Node,Boundary Nodes: Remove remaining SEV code
* [`7a3c9dc6f`](https://github.com/dfinity/ic/commit/7a3c9dc6f) Node,Crypto,T&V,IDX(crypto): Run fstrim\_tool with randomized delay on the guest OS crypto partition
* [`70d75fabb`](https://github.com/dfinity/ic/commit/70d75fabb) Node,Execution,Runtime: Update epoch lengths to be around 10 min

# IC-OS Verification

To build and verify the IC-OS disk image, run:

```
# From https://github.com/dfinity/ic#verifying-releases
sudo apt-get install -y curl && curl --proto '=https' --tlsv1.2 -sSLO https://raw.githubusercontent.com/dfinity/ic/463296c0bc82ad5999b70245e5f125c14ba7d090/gitlab-ci/tools/repro-check.sh && chmod +x repro-check.sh && ./repro-check.sh -c 463296c0bc82ad5999b70245e5f125c14ba7d090
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.


Link to the forum post: https://forum.dfinity.org/t/proposal-to-elect-new-release-rc-2024-03-20-23-01/28746/12